Huawei HCIP-Security-CTSS(Huawei Certified ICT Professional -Constructing Terminal Security System)

QUESTION NO: 1
Regarding the definition of WIPS/WIDS, which of the following statements is correct?

A. WIDS Is a wireless intrusion countermeasure system B. WIDS Is a wireless intrusion prevention system C. WIPS Wireless intrusion detection system D. WIPS Is a wireless intrusion prevention system

Correct Answer: D

QUESTION NO: 2
The user access security solution is one-kind"End to end"Security architecture. The user access security architecture includes three key components:Terminal equipment, network access equipment and access server.

A. wrong B. right

Correct Answer: B

QUESTION NO: 3
When using local guest account authentication, usually use(Portal The authentication method pushes the authentication page to the visitor. Before the user is authenticated, when the admission control device receives the HTTP The requested resource is not Portal Server authentication URL When, how to deal with the access control equipment.

A. Direct travel B. Discard message C. Send authentication information to authentication server D. URL Address redirected to Portal Authentication page

Correct Answer: D

QUESTION NO: 4
Which of the following methods can be used to protect enterprise terminal security?

A. Encrypted access B. Business isolation C. Audit billing D. Access control

Correct Answer: D

QUESTION NO: 5
In the process of establishing CAPWAP channel between AP and AC, AP and AC negotiate to establish CAPWAP tunnel. In this process, CAPWAP tunnel is established.
Use DTLS to encrypt and transmit UDP packets. What are the encryption methods supported by DTLS?
(multiple choice)

A. Certificate encryption B. PSK encryption C. Plaintext encryption D. AES encryption

Correct Answer: A,B

QUESTION NO: 6
If you are deploying BYOD When the system is installed, use a stand-alone installation SM, Dual-machine installation SC, Stand-alone hardware deployment AE,Which of the following descriptions are correct?
(Multiple choice)

A. AE Server priority use)SC server. B. If the Lord SC After the server fails,AE The server will use the backup SC server. C. host SC After the server is restored,AE Server will not switch back to master SC The server handles the business. D. Install AE When the server, you need to configure the main and standby SC Server IP address.

Correct Answer: B,D

QUESTION NO: 7
Which of the following equipment is suitable for use MAC Authentication access network?

A. For testing Linux System host B. Mobile client, such as smart phone, etc C. Network printer 232335 D. Office Windows System host

Correct Answer: C

QUESTION NO: 8
Use hardware SACG Access control,,In hardware SACG View the results of the conversation table on the deduction.
Which of the following statements are correct? (Multiple choice)

A. if 192.126.200.11 Is the server of the post-authentication domain, then IP Address is 192.18.0.1 If your terminal has not passed the authentication, it is possible to access the server. B. 192.168.1.0 definitely is Agile Controller-Campus Manager IP address C. 192.168.100.1 definitely is Agile Controller-Campus Controller IP address. D. If in 6 Within minutes of the conversation 192.168.0.19 154->/192.162.0.11: 15080 Not refreshed,IP Address is 192.168.0.119 If the device wants to IP Address is 192.168.200.11 For device communication, the session must be re-established.

Correct Answer: A,B,D

QUESTION NO: 9
Agile Controller-Campus The product architecture includes three levels. Which of the following options does not belong to the product architecture level?

A. Access control layer B. Network device layer C. User access layer D. Server layer

Correct Answer: A

QUESTION NO: 10
For the convenience of visitors, different authentication and master pages can be distributed for different visitors. When configuring the push page strategy, different matching conditions need to be defined, so which of the following options can be used as the limited matching conditions? (Multiple choice)

A. Priority of guest accounts B. Terminal P address C. Connected to the network SSID' D. Location information of the access device

Correct Answer: B,C

QUESTION NO: 11
The visitor management process includes page customization, account application, user authentication, audit, and logout. After the user successfully applies for an account, he needs to change.
When the account is distributed to users, what stage does the distribution of the account belong to?

A. Audit and cancellation stage B. User authentication phase C. Page customization stage D. Account application stage

Correct Answer: D

QUESTION NO: 12
How to check whether the MC service has started 20?

A. View in task manager TMCServerDaemon Whether the service is started. B. View in task manager TMCServer with TMCSeverDaemon Whether the service is started. C. View in task manager TMCSever Whether the service is started. D. Select on the server"Start>all programs> Huawei> Agile Cortroler> Sever rtrller",an examination MC Whether the status is"run".

Correct Answer: B

QUESTION NO: 13
Regarding the policy for checking account security, which of the following descriptions are correct? (Multiple choice)

A. It cannot be repaired automatically._ B. You can check whether there is a weak password. C. It is not possible to check whether the password length meets the requirements. D. You can check whether the account has joined a specific group.

Correct Answer: B,D

QUESTION NO: 14
Wired 802.1X During authentication, if the access control equipment is deployed at the Jiangju layer, this deployment method has the characteristics of high security performance, multiple management equipment, and complex management.

A. wrong B. right

Correct Answer: A

QUESTION NO: 15
Typical application scenarios of terminal security include: Desktop management, illegal outreach and computer peripheral management.

A. wrong B. right

Correct Answer: B

Huawei HCIP-Security-CTSS(Huawei Certified ICT Professional -Constructing Terminal Security System) - H12-723-ENU Exam Questions